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About this guide 



This guide provides information about configuring and using HP 
Storage Works Fast Recovery Solutions (FRS) in a Microsoft Exchange 
2000 and SQL 2000 environment. FRS enables quick recovery of 
Exchange and SQL databases. 

FRS combines database recovery features with Business Copy for use with 
HP disk arrays. FRS uses attributes of Business Copy to stage and manage 
recovery-ready databases to be used in the event of a catastrophic event. 
Using FRS, databases can be recovered in minutes rather than the hours 
typically required for a conventional restore from backup. 

Unless otherwise noted, the term disk array refers to these disk arrays: 

HP Storage Works Disk Array XP128 

HP Storage Works Disk Array XP1024 

HP Surestore Disk Array XP256 

HP Surestore Disk Array XP512 

HP Surestore Disk Array XP48 

HP Storage Works Virtual Array 7100 

HP Storage Works Virtual Array 7110 

HP Storage Works Virtual Array 7400 

HP Storage Works Virtual Array 7410 

HP Storage Works Enterprise Virtual Array 3000 (EVA) 

HP Storage Works Enterprise Virtual Array 5000 (EVA) 

Related information For information about the disk arrays, please refer to the owner's manuals. 

Prerequisite information 

The instructions in this guide are intended for system administrators who 
have the following skills and knowledge: 

• A background in direct access storage device subsystems and their 
basic functions 

• Familiarity with disk arrays and RAID technology 

FRS configuration requires an understanding of how to configure 
LUNs. If you need additional expertise in configuring the array, 
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consulting services are available from HP. Contact your HP 
representative. 

• Familiarity with the server operating system, including commands and 
utilities 

• Familiarity with Exchange 2000 administration 

• Familiarity with SQL 2000 administration 

• Familiarity with related disk array management software programs: 

HP Storage Works Business Copy XP 
HP Storage Works Business Copy VA 
HP Storage Works Business Copy EVA 
HP Storage Works Continuous Access XP 
HP StorageWorks CommandView XP 
HP StorageWorks CommandView SDM 
HP StorageWorks CommandView EVA 
HP StorageWorks RAID Manager Library 
HP StorageWorks Secure Path 

For information about related products, see the HP web site ( www.hp.com ) 
for related documentation: 

HP StorageWorks LUN Configuration Manager XP : User's Guide 

HP StorageWorks Business CopyXP: User's Guide 

HP StorageWorks Business Copy Virtual Array: Installation and 
User s Guide 

For Exchange 2000 and SQL 2000 information, see the Microsoft web site: 

www. m icrosof t. com 



Terminology 

A more comprehensive glossary can be found at the end of this manual. 

BC HP StorageWorks Business Copy XP Software that 

creates and maintains local copies of data stored on the 
disk array. The copies can be used for data duplication, 
backup, and local disaster recovery. 
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CA 



HP StorageWorks Continuous Access XP. Software that 
creates and maintains remote duplicate copies of data 
stored on the local disk array. The copies can be used 
for data duplication, backup, and disaster recovery. 



cluster 



The concept of linking individual servers physically 
and programmatically and coordinating communication 
between them so they can perform common tasks. 



failover 



The process that automatically shifts the workload from 
one server in a cluster to another server in the event of a 
failure. 



P-VOL 



The primary or main volume that contains the data to be 
copied 



production server Exchange 2000 or SQL 2000 server. 

recovery server FRS server. The server where copies of the production 
database are staged and managed and that runs the FRS 
GUI. 



S-VOL 



Secondary or remote volume. The copy volume that 
receives the data from the primary volume. 



Snapclone Secondary copies of the databases that are created using 

the EVA storage appliance. 
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Disk array firmware and software dependencies 



The features and behavior of FRS depend on the disk array firmware and 
RAID Manager Library versions. This guide describes FRS behavior based 
on features implemented in the latest disk array firmware and RAID 
Manager Library versions. 



^\ mm — 1 ■ Um mK 
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Version 




XP256 


52.48.06 or later 




XP48/XP512 


01.12.18 or later 




XP128/XP1024 


21.01.24 or later 




RAID Manager Library XP 


01.04.02 or later 




VA7100/VA7400 


HP 13 or later 




VA7410 


A00 or later 




EVA 


VCS 3.01.00 
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Technical support 

For the most current information about related products, visit the support 
web site: 

XP www.hp.com/ support/ stressfree 

VA www.hp.com/ support/ mss 

EVA hi 8000. wwwl .hp.com/ products/storageworks/enterprise/index.html 

For information about product availability, configuration, and connectivity, 
consult your HP account representative. 
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Revision history 

December 2001 
February 2002 



July 2002 



September 2002 



December 2002 



April 2003 



First release for Microsoft Exchange 2000. 

Revised for version 1.01. 
Included new GUI features. 
Expanded VA information. 

Removed examples 1 and 2; replaced with example 
of four storage groups with four databases each. 
Removed "Troubleshooting setup" section. 
Added errors 2401 to 2412. 

Revised for version 1.02. 

Included new GUI features, cluster support, and 
database integrity checking. 
Removed HORCM file dependency. 

Revised for version 1.03. 

Included new GUI features, one-to-many 
functionality, remote copy creation for XP disk 
arrays. 

Added CLI functionality. 

Added support for the VA74 1 0 disk array. 

Revised for version 1.00 of FRS for SQL 2000. 

Revised for version 1.03.01. 
Includes support for EVA. 

Revised for version 1.04. 

Added log replay feature for Exchange 2000. 
Includes support for multiple Exchange 2000 
databases on one LUN. 



June 2003 Revised for version 2.0. 

Integrated FRS for Exchange and SQL 

Added CA functionality for SQL 2000 

Added functionality for one SQL 2000 database 

across multiple LUNs. 

Added CLI functionality for SQL 2000 



November 2003 Revised for version 2.01.00. 
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February 2004 Revised for version 2.02.00. 

Added information about Instant-On feature 

(60-day free trial) 

Added mount point support 

March 2004 Revised for version 2.03.00. 

Added Chapter 5, describing HotSplit backups 
Added modification to CLI switches 
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Warranty statement 



HP warrants that for a period of ninety calendar days from the date of 
purchase, as evidenced by a copy of the invoice, the media on which the 
Software is furnished (if any) will be free of defects in materials and 
workmanship under normal use. 

DISCLAIMER . EXCEPT FOR THE FOREGOING AND TO THE 
EXTENT ALLOWED BY LOCAL LAW, THIS SOFTWARE IS 
PROVIDED TO YOU "AS IS" WITHOUT WARRANTIES OF ANY 
KIND, WHETHER ORAL OR WRITTEN, EXPRESS OR IMPLIED. 
HP SPECIFICALLY DISCLAIMS ANY IMPLIED WARRANTIES 
OR CONDITIONS OF MERCHANTABILITY, SATISFACTORY 
QUALITY, NON-INFRINGEMENT, TITLE, ACCURACY OF 
INFORMATIONAL CONTENT, AND FITNESS FOR A 
PARTICULAR PURPOSE. Some jurisdictions do not allow exclusions of 
implied warranties or conditions, so the above exclusion may not apply to 
you to the extent prohibited by such local laws. You may have other rights 
that vary from country to country, state to state, or province to province. 

WARNING ! YOU EXPRESSLY ACKNOWLEDGE AND AGREE 
THAT USE OF THE SOFTWARE IS AT YOUR SOLE RISK. HP 

DOES NOT WARRANT THAT THE FUNCTIONS CONTAINED IN 
THE SOFTWARE WILL MEET YOUR REQUIREMENTS, OR THAT 
THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED, 
VIRUS-FREE OR ERROR-FREE, OR THAT DEFECTS IN THE 
SOFTWARE WILL BE CORRECTED. THE ENTIRE RISK AS TO THE 
RESULTS AND PERFORMANCE OF THE SOFTWARE IS ASSUMED 
BY YOU. HP DOES NOT WARRANT OR MAKE ANY 
REPRESENTATIONS REGARDING THE USE OR THE RESULTS OF 
THE USE OF THE SOFTWARE OR RELATED DOCUMENTATION IN 
TERMS OF THEIR CORRECTNESS, ACCURACY, RELIABILITY, 
CURRENTNESS, OR OTHERWISE. NO ORAL OR WRITTEN 
INFORMATION OR ADVICE GIVEN BY HP OR HP'S AUTHORIZED 
REPRESENTATIVES SHALL CREATE A WARRANTY. 
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LIMITATION OF LIABILITY . EXCEPT TO THE EXTENT 
PROHIBITED BY LOCAL LAW, IN NO EVENT INCLUDING 
NEGLIGENCE WILL HP OR ITS SUBSIDIARIES, AFFILIATES, 
DIRECTORS, OFFICERS, EMPLOYEES, AGENTS OR 
SUPPLIERS BE LIABLE FOR DIRECT, INDIRECT, SPECIAL, 
INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR OTHER 
DAMAGES (INCLUDING LOST PROFIT, LOST DATA, OR 
DOWNTIME COSTS), ARISING OUT OF THE USE, INABILITY 
TO USE, OR THE RESULTS OF USE OF THE SOFTWARE, 
WHETHER BASED IN WARRANTY, CONTRACT, TORT OR 
OTHER LEGAL THEORY, AND WHETHER OR NOT ADVISED 
OF THE POSSIBILITY OF SUCH DAMAGES. Your use of the 
Software is entirely at your own risk. Should the Software prove defective, 
you assume the entire cost of all service, repair or correction. Some 
jurisdictions do not allow the exclusion or limitation of liability for 
incidental or consequential damages, so the above limitation may not apply 
to you to the extent prohibited by such local laws. 

NOTE . EXCEPT TO THE EXTENT ALLOWED BY LOCAL LAW, 
THESE WARRANTY TERMS DO NOT EXCLUDE, RESTRICT OR 
MODIFY, AND ARE IN ADDITION TO, THE MANDATORY 
STATUTORY RIGHTS APPLICABLE TO THE LICENSE OF THE 
SOFTWARE TO YOU; PROVIDED . HOWEVER. THAT THE 
CONVENTION ON CONTRACTS FOR THE INTERNATIONAL 
SALE OF GOODS IS SPECIFICALLY DISCLAIMED AND SHALL 
NOT GOVERN OR APPLY TO THE SOFTWARE PROVIDED IN 
CONNECTION WITH THIS WARRANTY STATEMENT. 
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Fast Recovery Solutions features 



HP Storage Works Fast Recovery Solutions (FRS) for Exchange 2000 and 
FRS for SQL 2000 provides these features: 

• support for HP StorageWorks disk arrays, including the EVA, XP, and 
VA product families 

• fast recovery of large Microsoft Exchange 2000 and SQL 2000 
databases 

• simultaneous recovery of multiple databases 

• lowest possible downtime during a corruption and database recovery 

• recovery to the last backup 

• support for mount points for FRS-managed recovery volumes. FRS 
2000 versions 2.02 and later support the use of mount points as FRS 
recovery LUNs. Recovery LUNs with drive letters will continue to be 
supported, as well as combinations of mount points and drive letters 

• database integrity checking 

• can be used with multiple backup utilities 

• a single FRS server supports multiple production Exchange 2000 or 
multiple SQL 2000 servers 

• supports Microsoft cluster in active-passive configuration 
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• CLI features, including split mirror backup, integrity checking, and 
remote copy creation 

• remote copy creation and maintenance through the use of Continuous 
Access software with XP disk arrays 

• Instant-On feature, which allows you a 60-day trial use of the 
software. At the end of the 60-day trial period, you must purchase a 
license for the product to keep working. The license is available from 
your HP representative. 

FRS for Exchange 2000 

For Exchange 2000, FRS provides these additional features: 

• supports two backup options: 

split mirror backup (Exchange database offline during backup, an 
included feature of FRS) 

HotSplit online backup (Exchange server running during backup) 

• option to replay logs after a recovery 
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The FRS concept 



FRS is an array-based tool designed to enable fast recovery when Exchange 
2000 and SQL 2000 databases are damaged. 

FRS stages recovery-ready copies of databases through interaction with 
Windows 2000, the disk array, and either the Exchange 2000 or SQL 2000 
production server. These copies can be used in the event of damage to the 
production databases. 

When a catastrophic event occurs, the Exchange or SQL administrator 
initiates the FRS process. This process takes the damaged database offline, 
removes it and inserts the known, good, recovery-ready copy of the 
database into the production server. It then brings the replaced production 
database back online, which restores user access. 

Actual time to replace the corrupt database with the known, good database 
varies from under a minute to several minutes, depending on the size of the 
database and the activity on the servers and disk array. 

The required starting point for the process is a good recovery-ready copy of 
the database, created by FRS. 

FRS is valuable to enterprises with high availability requirements for their 
large, centralized Exchange 2000 or SQL 2000 environments, those 
seeking to improve the SLA (Service Level Agreement) they are able to 
offer, or who have experienced significant loss due to downtime of their 
Exchange 2000 or SQL 2000 databases. 
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FRS and the total HP high-availability solution 



HP provides a total high-availability solution package from high-end 
storage to software and support. Fast Recovery Solutions is part of the 
high-availability offering, which includes 

• disk arrays 

• HP StorageWorks Business Copy XP 

• HP StorageWorks Business Copy VA 

• HP StorageWorks Business Copy EVA 

• HP StorageWorks Continuous Access XP 

• HP StorageWorks RAID Manager Library XP 

• CommandView SDM 

• CommandView XP 

• CommandView EVA 

• Fast Recovery Solutions 

• servers and software 

• storage consulting services 

• post-sales total solution support 
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Prerequisites and limitations 



This chapter pertains to both Exchange 2000 and SQL 2000. The following 
items are described in this chapter: 

• hardware/software checklist 

• FRS architecture (illustrations) 

• infrastructure requirements 

for use with split mirror (offline) backup 
for use with online backup 

• XP LUN configuration 

• VA LUN configuration 

• EVA LUN configuration 

• Windows 2000 disk configuration 

• (Exchange 2000 only) Exchange 2000 server configuration 

• (SQL 2000 only) SQL 2000 server configuration 

• integrity checking requirements 

• remote copy requirements 

• limitations 
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Hardware/software checklist 



Required for either Exchange 2000 or SQL 2000 

disk array 

n (VA/XP only) HP StorageWorks Business Copy software 
d (EVA only) HP StorageWorks Secure Path software 

□ (VA only) CommandView SDM 

□ (EVA only) CommandView EVA 

□ (XP only) RAID Manager Library 

3 Microsoft Windows 2000 Advanced Server 

Microsoft Windows 2000 service pack 4 

d Tape drive for backup. Not needed if using an offline backup, or if 
backing up to disk. 

Required for FRS for Exchange 2000 

□ Microsoft Exchange 2000 

0 Microsoft Exchange 2000 service pack 2 
Backup tool - supports two options: 

Any online backup utility that interfaces with the Exchange 2000 API 
An offline "split mirror" backup (function included with FRS) 

Required for FRS for SQL 2000 

□ SQL 2000 server 

□ SQL 2000 service pack 3 
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Server architecture for FRS 



XP or VA disk array 



A possible architecture for using FRS with an XP or VA disk array, with 
disk array microcode requirements, is shown below. 



Production Server 




r 



Disk Array: 
XP family with Secure 

Manager or 
VA family vyth Secure 
Manager 



Disk Array Microcode 

XP256 

52.48.06 or later 
XP48/XP512 

01 .12.18 or later 
XP128/XP 1024 

21.01.24 
XPRaid Manager Library 

01 .04.02 or later 
VA7 100/7400 

HP 13 or later 
VA7410 ADO or later 



FRS Server 



Installed com ponents: 
Wind cm; 2000 
Windows Service Pack 2 
Exchange 20007SQL 2000 
Exchange 2000/SQL 2000 

Service P ack 2 
RAID Manager Library (XP 

only) 



Installed com ponents: 
Windows 2000 
Windows Service Pack2 
SQL 2000/SQL 2000 Service 

Pack2 

RAID Manager Library (XP only) 
Command ViewSDM (VA only) 
FRS 
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EVA disk array 



A possible architecture for using FRS with an EVA disk array is shown 
below. 




Installed com ponents: 
Windows 2000 
Windows Service Pack2 
Exchange 2000/SQL 2000 
Exchange 2000/SQL 2000 
Service P ack 2 
Secure Path 



Disk Array Microcode 



HP Open View Storage Area Manager version 2.0 
with HSV manager version2.0C 



FRS Server 



HP Open View Storage Area 
Manager with HSV Element 
Manager 



Installed components: 

Windows 2000 

Windows Service Pack2 

SQL 2000/SQL 2000 Service 
Paok2 

Secure Path 

FRS 
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Infrastructure requirements 



For use with split mirror backup for both Exchange 2000 and SQL 
2000 

Installation of FRS when using split mirror backup requires one server to 
act as the recovery FRS management station. The FRS GUI runs from this 
server to stage the recovery-ready copies of the database to use in the event 
a fast recovery is needed. 

This server can be a standalone workstation, be joined to the production 
domain, or be a member of its own domain. The only requirement is that it 
be on the same network as the production servers it will manage. Prepare 
the recovery server by installing Windows 2000 Advanced Server, 
Windows 2000 service pack 4, RAID Manager Library (XP only), 
CommandView SDM (VA only), Secure Manager VA (VA only), Secure 
Path (EVA only) and the recovery server component of FRS. (More 
information about installation is in the installation chapter of this manual.) 

For a VA disk array, there must be one CommandView SDM management 
station. Installation of CommandView SDM on the server is not required, 
provided that there is a management station that has the ability to create and 
manage the VA disk array LUNs. 

For use with online backup (FRS for Exchange 2000 only) 

FRS requires a separate domain to host the recovery server because 
duplicate Exchange 2000 servers are not allowed in the same domain. The 
production domain must already be in place and functioning as an active 
Exchange 2000 server providing messaging services to customers. 

A recovery domain (where FRS works, staging copies of the Exchange 
2000 databases for use in the event of corruption of the production 
databases) must be created. 

The recovery domain consists of one server which acts as the Active 
Directory server, with Windows 2000 Advanced Server, Windows 2000 
service pack 4 or later, Exchange 2000, RAID Manager Library (XP only), 



Prerequisifes and limitations 



23 



CommandView SDM (VA only), Secure Manager VA (VA only), Secure 
Path (EVA only), the online backup utility being used, and FRS installed. 

There are additional benefits to having a separate domain functioning as the 
FRS recovery domain, such as individual mailbox recovery. These actions 
are not part of the FRS functionality, but a beneficial side effect of having 
an Exchange 2000 FRS recovery domain. 
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XP disk array LUN configuration 



LUNs must be configured on the XP disk array for use by the recovery 
server. 

If you use the remote copy option of FRS, use Continuous Access XP to 
create the pairs (production LUNs paired to remote recovery LUNs). After 
these pairs are manually created, FRS will see them. 

If you are using the integrity check/safe copy feature of FRS, add two 
recovery LUNs for each production LUN, rather than one. One copy will be 
used as a recovery-ready, known good database. The other copy will be the 
"pending" copy. It will have integrity checks run against it before it is 
promoted to the recovery-ready copy. The roles of these two recovery 
LUNs flip-flop so that there is always a known good recovery LUN. 

In addition, there must also be a small disk designated as the command 
device. The command device must be a minimum of 36 MB and cannot be 
a LUSE volume. This is a dual (or more) assigned drive, which controls 
communication between the disk array and the servers. The recovery 
server, as well as each of the production Exchange 2000 or SQL 2000 
servers, must have access to the command device. Only one command 
device is needed for multiple exchange servers. 

Exchange 2000 

For Exchange 2000, each database can reside on its own LUN or all 
databases can reside within a storage group on one LUN. Recovery server 
LUNs must be of the same size as the production server LUNs. 

Example If all databases in the first storage group reside on one OPEN-M*4 LUN, 
an OPEN-M*4 LUN for recovery must be created and presented to the 
recovery server. If each of four databases within the first storage group 
resides on a separate OPEN-M LUN, four OPEN-M LUNs must be created 
for recovery and presented to the recovery server. 
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SQL 2000 



For each SQL 2000 production database, there must be a corresponding 
recovery LUN of identical size. All supported SQL 2000 configurations are 
supported by FRS as long as all portions of database files and log files 
reside on a supported HP disk array 

Related information HP StorageWorks LUN Configuration Manager XP: User s Guide has 
information about configuring LUNs. 
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VA disk array LUN configuration 



The following pre-configuration of the VA disk array is required: 

For VA disk arrays, you must use CommandView SDM software to create 
the initial business copies on the recovery server. Assign LUN 0 
write-configure access to each of the recovery and production servers. LUN 
0 acts as a command device, and FRS cannot function unless all servers 
have access to it. 

Using CommandView, create business copies for each existing production 
LUN that is to be managed by FRS. If you are using the integrity check/safe 
copy feature of FRS, create two business copies for each production LUN 
rather than one. 

Security must be enabled. Configure the security table through 
CommandView SDM so that LUNs are seen only by their correct host. The 
FRS servers should see only LUN 0 and the business copies. The 
production server should see only LUN 0 and the production LUNs. 

In assigning security, you must use the node worldwide name of the HBA. 
FRS will not function properly if the port worldwide name is used. 

In the Business Copy screen of CommandView, highlight each newly 
created business copy and click on Copy From Parent. This action copies 
the production data onto the recovery LUNs and is the required starting 
point for FRS. 

Creating remote copies is not available feature on VA disk arrays. 

Related information HP StorageWorks Virtual Array: Installation Manual provides information 
about configuring the LUNs with CommandView. 
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EVA Disk Array LUN configuration 



Configure LUNs on the disk array for use by the recovery server. For each 
Exchange 2000 and SQL 2000 production database, there must be a 
corresponding LUN of identical size for recovery. 

If using the integrity check/safe copy feature of FRS, add two recovery 
LUNs for each production LUN, rather than one. One copy will be used as 
a recovery-ready, known good database. The other copy will be the pending 
copy that will have integrity checks run against it before promoting it to the 
recovery-ready copy. The roles of these two recovery LUNs flip-flop to 
ensure that there is always a known good recovery LUN available. 

The recovery LUNs may be created by using the Snapclone feature of the 
EVA array. Again, if you are using the integrity check/safe copy option of 
FRS, create two Snapclones for each production database. Otherwise, only 
one Snapclone is required for each production database. 
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Windows disk configuration for the recovery server 



XP family 

In disk management, format the newly created recovery LUNs. Disks must 
remain in basic configuration. Dynamic disks are not supported. 

Each disk must be formatted with the volume label hpfrs and either a drive 
letter (as shown below) or as a mount point. This allows FRS to recognize 
disks you have designated as recovery disks. 



3 Computer Management 



'I 



jJ , Computer Management (Local) 
□-||l5 System Tools 
+ JjJ Event Viewer 

System Information 
Performance Logs and Alerts 
Shared Folders 
Device Manager 
_ Local Users and Groups 
- \±j Storage 

j-Q Disk Management 

: .Jj Disk Def ragmenter 

!■ "O Logical Drives 
* Removable Storage 
+ Services and Applications 



—I hpfrs (E:) 
S hpfrs (F:) 
3 hpfrs (Si) 
S hpfrs (H:) 
IS hpfrs (I:) 
S hpfrs (J:) 
S hpfrs (K:) 
S hpfrs (Li) 
—I hpfrs (M:) 
— 'hpfrs (N:) 
S hpfrs (O:) 
S hpfrs (P:) 
» hpfrs (Q:) 



Volume 



O^Disk 7 

Basic 
6,37 GB 
Online 



O^Disk 8 

Basic 

6.37 GB 

Online 



O^Disk 9 

Basic 
6. 37 GB 
Online 



Layout 



I TYPE 



Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 
Partition 



hpfrs (!:) 

6.87 GB NTFS 
Healthy 



hpfrs (J:) 

6.87 GB NTFS 
Healthy 



hpfrs (K:) 

6.87 GB NTFS 
Healthy 



hr,F, t tp.\ 

Primary Partition 



File System 



I Status 



I Capacity j*i 



NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 
NTFS 



Healthy (System) 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 

Healthy 



|Primary Partition | 



16.94 GB 
37 GB 
99 GB 
99 GB 

37 GB 
37 GB 
37 GB 
37 GB 
37 GB 
37 GB 
37 GB : 
37 GB 
37 GB 



GB -J 
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If you are using the integrity check/safe copy feature of FRS, you must 
format two recovery LUNs in this way for each production LUN managed 
by FRS. 

If you are using the remote copy option, use CA to create the local/remote 
pair. After these pairs have been established, FRS will see them and display 
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additional GUI features for their management. The remote pair can be 
created at any time. If pairs already exist, FRS will see them. If pairs are 
created after FRS has already been installed, a refresh of the GUI will show 
them. 

VA family 

Because CommandView SDM was used to make a copy from the parent, 
when the disks are rescanned, the report shows formatted and labeled disks. 
No further configuration is needed in Windows. 

1 . From Window Disk Management on the recovery server, execute a 
rescan of the disks. 

2. Confirm that all Business Copy disks are displayed and have the 
appropriate format. 

3 . Confirm that LUN 0 is accessible to all FRS and production servers and 
has been given write-configure access. 

EVA family 

The storage appliance has already been used to create either one or two 
copies of each of the production databases. See "EVA Disk Array LUN 
configuration" (page 28). In Windows Explorer, rename the newly created 
recovery LUNs. Each disk must be renamed with the volume label hpfrs. 
This allows FRS to recognize disks you have designated as recovery disks. 

If you are using the integrity check/safe copy feature of FRS, you must 
rename two recovery LUNs this way for each production LUN managed by 
FRS. 
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Exchange 2000 configuration 



FRS works with Exchange 2000 in any of storage groups and databases that 
fall within the supported limits of Exchange 2000. Configurations can 
range from one storage group supporting one database to four storage 
groups each supporting four databases. 

The streaming and .edb files for each database cannot reside on separate 
LUNs. Each database with its streaming and .edb files must reside on one 
LUN, or multiple databases in a storage group can reside on one LUN. 

If multiple databases reside on one LUN, all databases on that LUN must 
be dismounted for maintenance of any one of the databases. 

If log replay is required, the Exchange 2000 databases must have circular 
logging turned off. FRS cannot replay logs if circular logging is turned on. 

Tip If you are creating a separate domain (for example, for an online backup), 
Exchange 2000 can be configured on the FRS recovery domain as well. 
This enables other benefits, such as creating further mirrors of the data and 
individual mailbox recovery. These features are not features of FRS, but 
would be possible if the FRS recovery domain is a functional Exchange 
2000 server. If Exchange 2000 is installed and configured on the FRS 
recovery server, it must be configured identically to the Exchange 2000 
production server. 
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SQL 2000 configuration 

FRS SQL works with SQL 2000 within the supported limits of SQL 2000, 
except for the following: 

• Service pack 3 for SQL 2000 is required for FRS 
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Requirements for integrity checks 

Exchange 2000 

The integrity check feature of FRS uses ESEUTIL, a Microsoft Exchange 
2000 utility that checks for logical and physical corruption. FRS uses the 
ESEUTIL\g option, which is a reporting tool only No changes are made to 
the database in the course of the check. The ESEUTIL files must be moved 
to the recovery server to enable the FRS integrity check feature. 

1 . On the FRS server, create an exchsrvr folder on the root drive. 

2. Within the exchsrvr folder, create a bin folder. 

3. On the Exchange production server, locate the Exchsrvr/bin directory. 
Copy the following files to the newly created exchsrvr/bin directory 
on the FRS server: 

EseutiLexe 

Ese.dll 

Jcb.dll 

Exosal.dll 

Exchmem.dll 



E| C:\eKchsrvr\bir 



j File Edit View Favorites Tools Help 




] *= Back • ^ • EJ | ©Search 


Folders ^History | Q£ l£ X tfD | B' 


J Address |Q C:\exchsrvr\bin 







I T yP e 



Folders 



Desktop 
m ^ My Documents 
B ^1 My Computer 

E-t^ 3tt Floppy (A:) 
B Local Disk(C:) 

El -Q Documents and Settir 
B Pi exchsrvr 
£3 bin 



bin 



5elect an item to view its 
description. 



bee -3lso: 

My Documents 



@ ESE.DLL 1,521 KB Application Extensic 

Zj 1 ESEUTIL. EXE 49 KB Application 

exchmem.dll 29 KB Application Extensic 

_%] EXOSAL.DLL 57 KB Application ExtsnsiJ 

3 JCB.DLL 45 KB Application Extensic 



Related information Microsoft article Q244525, "How to run ESEUTIL on a computer without 
Exchange server," outlines the process in detail. 
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SQL 2000 



The integrity check feature of FRS for SQL utilizes DBCC (database 
consistency check). To use this feature, SQL Server must be installed on the 
recovery server. If SQL Server is not installed on the recovery FRS server, 
no integrity check options will appear for those FRS-managed SQL 
databases appearing in the FRS GUI. 
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Remote copy requirements for the XP disk array 



The remote copy function is available only for XP disk arrays. 

After creating a local recovery LUN, you can create additional copies of the 
databases on remote disk arrays for disaster recovery purposes. For each 
local recovery LUN managed by FRS, there can be one remote LUN 
managed by FRS. The following requirements apply: 

• A remote server must be connected to the remote disk array that will 
host the remote copies 

• Both the local and remote disk arrays must have Continuous Access 
software installed 

• The initial pair between the local recovery LUN and the remote 
recovery LUN must be created manually as a starting point 

• A reboot may be required after initial creation of the local/remote pair 

• Just as you need to do an initial FRS split mirror backup to the local 
recovery LUNs, you need to execute an initial FRS split mirror backup 
to the remote recovery LUNs 

• The Remote Copy portion of FRS must be installed on the remote 
server 

• The remote server must have a command device on the array 

For information about how to install the remote server, see "Installation" 
(page 39). 

For information about how to use the remote copy features, see "Using the 
remote copy feature" (page 60). 
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The figure below shows the relationship between the local and remote disk 
arrays for the remote copy feature of FRS. 



Production Server 




r 



Installed com ponents: 
Windows 2000 
Windows Service Pack2 
Exchange 2000/SQL2000 
Exchange 200Q/SQL2000 

Service P ack 2 
RAID Manager Library 



S mm itch 



FRS Server 




Disk Array: 
XP family with Secure Manager or 
VA fam ily vuth Secure M anager 



Continuous Access Link between 
local and remote disk arrays. 



Installed com ponents: 

Windows 2000 

Windows Service Pack2 

SQL 20007SQL 2000 Service 
Pack2 

RAID Manager Library 



Remote FRS server 



Rem ote disk array: XP fam ily with 
scure manager and continuous 
Access enabled. 



Installed components: 
Windows 2000 
Windows Service Pack2 
RAID Manager Library (XP only) 
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Limitations 



FRS is supported with Basic disk configuration only. Dynamic disks are not 
supported. FRS supports a database on a single LUN only. LUSE can be 
used to create a large LUN; however, spanning LUNs for a single database 
is not supported. 

Only one instance of FRS can be running at any given time on one recovery 
server. If more than one instance of FRS is running, data can become 
corrupted (for example, if FRS is running on the recovery server and 
another administrator uses a remote access tool such as Terminal Services 
to access the same instance of FRS). 

Exchange 2000 

FRS works within all the supported limitations of Exchange 2000 with the 
following exceptions: 

• The streaming and .edb files must reside together on the same LUN 

• Log files cannot reside on the database LUN 

• Log replay is unavailable when circular logging is enabled 

SQL 2000 

FRS works within the supported limitations of SQL 2000 with the 
following exceptions: 

• Service pack 3 for SQL 2000 is required 
Windows 2000 WMI 

There was an issue with Windows WMI query where a WMI query would 
return information about only 32 disk drives even when more than 32 
drives were configured. This issue was resolved in Windows 2000 service 
pack 4. 
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Installation 



Before installing FRS, ensure that the following has been done. If these 
items are not done, FRS cannot function properly. 

• (XP only) RAID Manager Library has been installed on both 
production and recovery servers. 

• (XP only) Both production and recovery servers have access to a 
command device on the disk array. 

• Exchange mailbox stores/SQL databases with log files reside on the 
disk array LUNs. 

• (VA only) Both production and recovery servers have access to LUN 
zero. 

• (XP only) Recovery LUNs of appropriate size have been configured 
with the label hpfrs. 

• (VA only) A CommandView SDM station is set up which gives access 
to VA LUN management. 

• (VA only) CommandView SDM has been used to create the initial pair 
and do an initial Copy From Parent. 

• Additional recovery LUNs have been configured for use for integrity 
checks (if using the integrity check/safe copy feature). 
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• (Exchange 2000 only) ESEUTIL files have been moved to the 
recovery server (if using the integrity check feature). 

• (SQL 2000 only) SQL 2000 must be installed on the recovery server (if 
using the integrity check feature). 

• (VA only) The security table for the VA is configured using the node 
worldwide name (use of port WWN is not supported). 

• (XP only) If you are using a switched environment, Secure Manager is 
configured for access by hosts to LUNs. 

• (EVA only) Secure Path is installed on the production and recovery 
servers. 

• (EVA only) Network connectivity between the appliance, recovery 
servers, and all production servers. 



40 



HP StorageWorks Fast Recovery Solutions: User's Guide 



Installing the production and FRS servers 



Both Exchange 2000 and SQL 2000 



Installation for each server for SQL or Exchange 2000 is identical, with the 
exception of the Select Component screen. Follow this procedure for each 
of the recovery, production, and remote servers. 

If you are installing FRS into a cluster environment, treat each node as a 
production server, and install FRS on both nodes. 

Open the FRS CD and execute the setup.exe file to launch the installation 
wizard. On the Select Components screen, choose the appropriate 
component to install: production, recovery, or remote server. In a cluster 
environment, the production component is installed on each of the cluster 
nodes. 



Exchange 2000 



InstallShield Wizard 



Select Components 




■■■□Recovery Server 
■■■□Remote Server 



Space Required on C: 
Space Available on C: 
InstallShield 



Please select the Server type to be installed during this installation session of the hp 
StorageWorks Fast Recovery Solution software. 

Description — 

The Production Server is the 
server hosting the production 
environment. 

Click on each component for a 
description of that component. 



752 K 
1 5750336 K 



< Back 



Newt > 



Cancel 
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DCOM configuration 



FRS offers to launch DCOM Configuration online help before launching 
DCOM configuration. This facility provides all steps required for 
configuring DCOM. The online help provides the same instructions with 
screen examples. 

After FRS launches the DCOM configuration properties: 

1 . Select hpfrscdo.FrxDiskManager from the list of applications and 
open Properties. 

2. Select the Security tab. 

3. Select Use custom access permissions; then click Edit. 

4. Click Add and scroll down to Everyone on the users list. 
Click Add. 

Click OK. 
Click OK again. 

5. Select Use custom launch permissions; then click Edit. 

6. Click Add and scroll down to Everyone on the users list. 
Click Add. 

Click OK. 
Click OK again. 

7. Click Use default configuration permissions at the bottom of the 
hpfrscdo.FrxDiskManager Properties window. 

8. Select the Identity tab. 

9. Select This User. 

10. Select Browser. 

1 1 . Select Administrator. 
Click Add. 

Click OK. 

12. Enter the administrator's password. 

13. Re-enter the administrator's password and click OK. 

14. Click Add. Click OK. 
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15. Click Apply and OK until you exit from the DCOM configuration 
window. 

Upon completion of DCOM configuration, the installer returns to 
the FRS installation window. 

16. Click Finish to complete installation. 

Repeat this procedure for each production or recovery server. 
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Uninstalling FRS 



Uninstalling FRS can be done in one of two ways: either through using the 
FRS CD or through Add/Remove Programs in the Windows Control Panel. 

With either method, the uninstall script prompts you to remove FRS from 
the system. 

To uninstall FRS with the CD: 

Open the contents of the FRS CD. Click setup.exe to launch the uninstall 
script. 

To uninstall by using Add/Remove Programs: 

From the Start menu, select Settings, and open Add/Remove Programs. 
Find the HP FRS entry and select it. Click Change/Remove to launch the 
uninstall script. 
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Upgrading from a previous version of FRS 



If a previous version of FRS was installed, FRS 2.03 will automatically 
prompt you to do a "modify" upon installation. Doing a modify will retain 
all previous FRS pairings and recovery-ready status. 

If you uninstall the old version of FRS completely before installing FRS 
2.03, previous FRS pairs will not be recognized and you will need to do an 
FRS split mirror backup again to put the databases back into 
"recovery-ready" status. 

If there are no configuration changes to Exchange 2000 or the Windows 
disk management system, no configuration changes are needed after an 
upgrade. 
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Using FRS 



The following items are described in this chapter: 

• user interface 

• maintenance/using the split mirror backup function 

• using the remote copy feature 

• checking integrity 

• automatic integrity check after split mirror backup 

• executing a recovery 

• using the Command Line Interface 

• options 
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User interface 



The first time you start FRS, the license notification window will appear. 



FRS 2000 License Notification 



|\ First time use of Licensed version of FR5 2000. 
- ''■ Do you have a Permenant license key to install? 



' Yes 1 


No 







Click Yes if you have a purchased license, or No to continue using the 
60-day trial version of FRS with Instant-On capability If you are using the 
60-day trial version, only one disk array will be managed by FRS. 

If you are using the 60-day Instant-On trial: 

If you are using the 60-day Instant-On trial, click No. The Select Server 
window appears. Continue with step 3 of the procedure below. 

If you have a permanent license: 

1 . If you have a permanent license, click Yes. The Enter License window 
appears. 



* Enter License 



Licensed for: 1 hp StorageWorks Array(s) 
Instant-On License will expire in GO days. 



License Code Word: 
License Count: 



rrrrrrrr 



OK 



] 



Cancel 



2. Enter the license code word. 
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3. Enter the license count. The number depends on how many licenses 
were purchased and how many arrays will be managed. 

4. Click OK. The Select Server window appears. 



)'+'-■ Select Server 



Recovery Server Name: | recovery 



Production Server Name: 



Remote Copy Server Name: 



e2k2 



OK 


Cancel 







5. Enter the name of the recovery server. 

6. Enter the name of one of the production servers to display the graphical 
user interface (GUI). If the production server is set up as part of a 
clustered environment, enter the virtual server name as the production 
server name. 



XP disk arrays only 
(optional) 



If you are using the remote copy feature of FRS, also enter the name of 
the remote copy server. If you are not using the remote copy feature, 
leave this field blank. 



8. Click OK. 
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_?JxJ 



FRS 2000 dynamically manages mount points for all valid 
recovery luns. Mount point names reflect the structure of the 
Production databases. Please provide the desired location for the 
mount point base. 



Example: D:\Mnt 



Mount Point Base: 



OK 



FRS prompts you to enter a "mount point base." This is the location 
where FRS keeps track of the servers and databases being managed. 
The mount point base can be any NTFS formatted drive where mount 
points can be specified, such as the root drive, or any external storage 
drive. You must specify a mount point base. 

9. Enter a mount point base and click OK. 



SQL only 



An authentication type window appears. 
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- I or Production Server: E2K2 



SQL Server provides authentication based on Windows accounts 

and specific SQL Server login IDs and passwords. 

Please select the apporpriate level of authentication desired. 

-Authentication: — 



C S Q L S erver and Windows 
(• *•.•.• ir ii : •: Onlj^jj 

SQL Server: — 



Login ID: 
Password: 



OK 



Cancel 



10. Select either "Windows Only" or "SQL Server and Windows" 
authentication. 

If you select SQL authentication, enter the SQL server login ID and 
password. 

11. Click OK. 

EVA only For an enterprise Virtual Array (EVA), FRS displays the message: 




12. Click OK. The Select Storage Appliance message window appears. 
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■ Select Storage Appliance 



Storage Appliance IP: 
Administrator Username: 
Administrator Password: 



7j xj 



15.75.203.205 



administrator 



OK | 


Cancel 







1 3 . Enter the IP address, administrator user name, and the password for the 
EVA storage appliance. Click OK. 



To add more production servers or a remote server to the GUI, select File > 
Open server to access the Select Server screen. The following illustration 
shows that the remote server "neelix" and the SQL server, "SQL" have 
been added. 
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Ij^hp StorageWorks - Fast Recovery Solutions 2000 1 | 1 


File Edit View Help 




Fast Recovery Solution 


\R E COVE R Y\E 2K2\Exchange\First Storage Group 


^ Universal 
E-^J RECOVERY 
j M NEELIX 

□-•■3 E2K2 

Fl-fn Ewchange 

i i~p8B13 

m-m sg2 

B-C] SQL Databases 
B-CD combo 
Etl—CH DBI-sql 
B—CD master 
B-CD model 
■ II msdb 
B -CD Northwind 
B-I°~l pubs 
- I 1 SQL-VA-2 
~ | ] tempdb 
tt\.-C~\ VASQL 

aj SQL 

B-Q SQL Databases 
B--CD big one 

b-Q DB1 
i-Q DB2 
B-CD master 
B-CD model 
~ I" 1 msdb 
B -CD Northwind 
B-CD pubs 
B--Q tempdb 


Database Name | Recovery Strategy | Locked | Recovery Ready | Mount on Start 


PUB None Not Locked No Yes 
bigDB None Not Locked No Yes 
DB1 None Not Locked No Yes 
DB2 None Not Locked No Yes 
DB3 None Not Locked No Yes 


<l 1 ►! 




Status | G/G/2003 1 8:14 AM 



The window displays the production configuration in the left panel. The 
right panel displays information about any component you highlight in the 
left panel. When a database is highlighted, (as shown above) information is 
displayed in the right pane for the database's production and recovery 
LUNs, as well as date and time information for integrity checks, last 
backup, and last recovery. 
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Adding a permanent license for FRS 



1 . Select File > Add license from the FRS main window. The Enter 
License window appears. 



Enter License 



Licensed for: 1 hp StorageWorks Array(s) 
Instant On License will expire in GO days. 



License Code Word: 



License Count: 



rrrrrrrr 

HI 



OK 



Cancel 



2. Enter the license code word. 

3. Enter the license count. The number depends on how many licenses 
were purchased and how many arrays will be managed. 

4. Click OK. 
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First-time split mirror backups 



EVA and XP disk arrays 

The first time FRS is installed and started, the Recover button will not be 
enabled and the database's status displays this message: 

No Recovery LUN Available 

You must do a split mirror backup for each database at least once (using 
FRS) in order for FRS to see a recovery-ready LUN. After this first-time 
split mirror backup, the you can update the recovery LUN by an online 
backup, or by continued use of the FRS split mirror backup feature, or by a 
combination of both. 

For information about the Integrity Check box, see "Checking integrity" 
(page 63). 

VA disk arrays 

As described in "VA disk array LUN configuration" (page 27), 
CommandView SDM has already been used to create the initial business 
copy and "Copy From Parent." Therefore, the databases configuration 
section of the GUI displays the LUN information from the LUNs that 
received business copies. 

After first opening FRS, the recovery LUN is already designated but does 
not become recovery-ready until after FRS executes a split mirror backup. 
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Maintenance/Using the split mirror backup feature 



The time required to execute the first-time split mirror backup is longer 
than the time required for subsequent splits. During the initial split mirror 
backup with FRS, the pair is created. Subsequent split mirror backups only 
resynchronize the pair and thus require less time. 

Whether using an EVA, XP or VA disk array, the first time FRS is started, 
you must create a pair affinity for each database. Even if online backups 
will be used in the course of normal maintenance, this pair must be created 
once to set up the relationship between production and recovery LUNs 
(between the primary and secondary volumes). This initial pair must be 
created by using FRS. 

EVA and XP disk arrays 

1 . Select the database to be backed up on the left panel of the FRS GUI. 
The Database Configuration section of the GUI displays the production 
LUN information. The first time that FRS is used, FRS displays this 
message: 

No Recovery LUN Available 

2. Click Split Mirror Backup. 

A LUN selection box pops up and prompts you to choose from a list of 
available like-sized LUNs. This list is based on the LUNs that were 
previously formatted with the HPFRS label. For XP, the list indicates 
whether any remote copy is attached. If you choose LUNs with a 
remote copy, additional GUI options appear to automatically update 
the remote copy each time a local split mirror backup is executed. 
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Select a lun to be paired with the Production lun for the next Snapshot backup: 



Volume 


Port 


Lun 


Ldev 


Remote Volume 


Port 


Lun 


Ldev * 


hpfrs (V:) 


CUE 


88 


262 


Copy Attached 


CL2H 


16 


258 , 


hpfrs (P.) 


CUE 


39 


264 


Copy Attached 


CL2H 


17 


258 


hpfrs (G:) 


CUE 


86 


275 


Copy Attached 


CL2H 


18 


260 —I 


hpfrs (P:) 


CUE 


16 


12 










hpfrs (Q:) 


CUE 


17 


13 










hpfrs fR:l 


CUE 


78 


14 










<l 1 M 



Cancel 



3 . Choose one of these possible recovery LUNs. Click OK to proceed with 
the split mirror backup. 

The following is an example of the progress window of a SQL 2000 
database on an XP disk array: FRS displays the progress of actions as they 
occur during the pair creation: 



Creating Split Mirror of Database [SQL:(DB1)] 



□ 



Initializing ... Database Filets) - DBl_Data, DBl_Data -Done- 
Dismounting Recovery Lun C 0 : 3 ... -Done- 
Waiting for Pair Delete to Complete ... -Done- 
Syncronizing with other tasks. . . . Snapp ing SQL Database* s) == 
Initiating Pair Creation C DBIwn. ^PHVsICHLDRIUE2) ... -Done— 

Syncronlsing with other tasks SQL Snapshot CompLete 

Total Database Frosen time: 0 minutes 1.312375 seconds 
Waiting for Pair Creation to Complete 



Ul 



Initialising ... LogfiLe(s) - DBl_Log, DBl_Log -Done- 
D ismount ing Recovery Lun CP:) ... -Done- 
Waiting for Pair Delete to Complete ... -Done- 
Waiting for SQL Database Snap to begin.... -Done- 
Initiating Pair Creation C log-l\\N. nPHYSICPLDRIUES) ... - 
Waiting for SQL Database- Snapshot to complete .... -Done- 
Waiting for Pair Creation to Complete 



Database [SQI_:(DB1)] 
28.00% 



Cancel 
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The following is an example of the split mirror backup progress window 
when using an EVA disk array: 



1 + Creating Split Mirror of Database [PR0LIANT1:SG1 ,DB: 


_|n|> 


= 1 










Initializing ... -Done- 
Dismounting Recovery Lun (H:) ... -Done- — — 
Unpresent Ing Recovery Udisk tP-DBl HpFrs Pair 1) from all ho 
DeLetlng UdLsk tP-DBl HpFrs Pair IT ... -Done- 
Dismounting Database (SG1\DB1) ... -Done- 
Dismounting Production LUN (F:) ... -Done- 
Creating SnapClone of Database ( DB1\\\. \PHYSICfiLDRIUEl ) ... 1 
Mounting Production LUN (F:) ... -Done- 
Mounting Production Database (SG1\DB1) ... -Done- 
Total Database Of f L ine time: Q minutes 18.63634 seconds 
Waiting for Copy to Complete 




<\ 1 


jj 












Database [PR0LIANT1:SS1\DB1] 
52.00% 













Subsequent split mirror backups require no LUN selection because the 
LUNs have already been designated. 

VA disk arrays 

For VA disk arrays, CommandView SDM should previously have been 
used to create the initial business copy and copy from parent. The FRS 
database configuration section displays information for the Business Copy 
LUNs. 

1. Highlight the database. 

2. To start the initial split mirror backup, click Split Mirror Backup. The 
backup proceeds and its progress is displayed in a window. 
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All Disk Arrays 

When the production database is remounted, production is back online and 
the Exchange 2000 or SQL 2000 databases are accessible by users. The 
progress window displays how long the production database was 
inaccessible. The time from initiating the backup to coming back online 
varies depending on the size of the database, whether an initial setup or 
subsequent maintenance backup is being performed, and other activity 
taking place at that time on the array. 

You can perform backups on multiple databases by beginning them serially. 
It is recommended that you limit the number of backup/recovery processes 
to 5 at one time. Consult your HP representative to optimize performance 
for your particular configuration. 

Perform backups as often as needed and as often as scheduled downtime 
allows. This serves to create the shortest possible window of potential loss 
if a corruption that necessitates using FRS to restore data occurs. 

If you use the integrity check/safe copy feature of FRS, the integrity check 
must be viewed by the administrator. If no corruption is detected, accept the 
result as a good copy. 

When the integrity checked version is accepted, it is promoted to recovery 
LUN status and displayed in the GUI. When a second split mirror backup is 
done, you need to choose a second LUN. FRS retains the first known, good 
copy as the recovery LUN until the second LUN's integrity check is viewed 
and accepted. 

If you do not use the integrity check/safe copy feature of FRS (the Integrity 
Check box is not enabled), only one recovery LUN is consumed per 
production LUN, and newly backed up LUNs are automatically promoted 
to recovery LUN status. 

For more information about integrity checking, see "Checking integrity" 
(page 63). 
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Using the remote copy feature 



(XP arrays only) HP Storage Works Continuous Access (CA) software must be installed on 
the disk array to use the remote copy feature. 

For each recovery LUN maintained by FRS, there can be a corresponding 
remote LUN for disaster recovery purposes. This remote LUN must be 
created and paired manually by using the Continuous Access software. 

After you have established the remote pair manually, FRS will detect it and 
present expanded features for the maintenance of the remote LUNs on the 
FRS GUI. 

Just as you need to do an initial FRS split mirror backup to the local 
recovery LUNs, you need to execute an initial FRS split mirror backup to 
the remote recovery LUNs. 
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The following example shows the new GUI features that will appear when 
remote copy is being used. 



1 - hp StorageWorks - 


Fast Recovery Solutions 2000 


-ln| x| 


File Edit View Help 


■m\a\ %|e 






Fast Recovery Solution 


|\RECOVERY\E2K2\Exchange\First Storage GroupVPUB 





~1 Universal 
R »| RECOVERY 
Si NEELIX 
3j E2K2 
B--CZ1 Exchange 

- First Storage Group 
~" PUB 
, bigDE 
[ DB1 
] DB2 
[ DB3 
■Q SG2 

ExchangeVA 

[ VADB 

ffl -Q SQL Databases 
■gj SQL 

B--Q SQL Databases 
big one 
B-Q PRIMARY 

Up big one_D a 
MB big one_1_l 

big one_2_l 

-Q DB1 
B -Q PRIMARY 

: DB1_Data 

H-O DB2 

master 
Fl--I"~l model 
msdb 

EH- P~l Nnrthwinrl ^ 



Database Configuration 
Database Status — 



hp StorageWorksXP- Model: HP0PEN-9 9C9I Disk Device 
Production Lun: 1 8 - Ldev: 1 0 - Disk [L) 
Recovery Lun: 2S ■ Ldev: 261 ■ Disk (E:) 
Timestamp of this Backup: 6/6/2003 9:15:58 AM 
Integrity Checked:6/6/2C03 9:21 :36 AM 
Accepted as Safe Copy:6/6/2003 9:21:42 AM 



-Remote Copy — 

Auto-Start Remote Copy 

FRS Remote Copy Lun: 1 5 - Ldev: 257 

Last Remote Copy Finished: 6/6/2003 9:1 9:03 AM 



■Integrity Check — 

Run Integrity Check After Split Mirror 

Pending Lun: 88 - Ldev: 262 - Disk (V:) ===> Remote Copy Lun: 16 - Ldev: 258 
Timestamp of this Backup: 6/6/2003 9:30:07 AM 
Integrity Checked:6/6/2003 9:30:11 AM - Successful 
Not Yet Reviewed 



View Integrity Check 
Results 



Accept Integrity Check 
Results 



3plit Mirror with 
Integrity Check 



Integrity Check 



Remote Copy 



Remote Restore 



Help 



Status 



6/6/2003 



9:30 AM 



If you check the Auto-start Remote Copy box, at the end of every 
successful split mirror backup FRS will update the remote copy of that 
LUN. Unchecking this box enables the Remote Copy box, which allows 
you to resync the remote copy at will, independent of a split mirror backup 
of the production LUN. 
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If both the Auto- Start Remote Copy box and the Run Integrity Check after 
Split Mirror box are checked, events occur in the following sequence: 

1 . The split mirror backup is done to the local recovery LUN. 

2. The integrity check runs automatically after the split mirror backup. 

3. The administrator must view and accept the integrity check. 

4. After the integrity check has been accepted, the remote copy operation 
begins. 

When the copy is complete, the icon next to the database will again turn 
green, indicating that it is available for a new action. 

When the remote copy is complete, the Remote Restore button appears. 
Now a fast recovery can be executed, if needed, from the remote LUN. 
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Checking integrity 



Before using the integrity check feature of FRS, see "Requirements for 
integrity checks" (page 33). There are two integrity check methods: 

• Automatic integrity check after split mirror backup 

This method is known as the "safe copy" method because it retains the 
previous known good copy of the database. The safe copy of the 
database is not overwritten until after the integrity check is accepted. 
This method consumes twice the recovery disk space, as two recovery 
LUNs are required for each production LUN. 

• Manual integrity check independent of split mirror backup 

Either method produces an integrity check progress window, as well as an 
integrity check report that can be viewed by an administrator and accepted. 

If the integrity check results are accepted, the GUI will be updated with the 
information about the integrity check. If you are using the automatic 
integrity check after split mirror backup, your accepting the integrity check 
results will display a window alerting you that by accepting, the pending 
LUN will be promoted to recovery-ready status. 
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:■ +: Integrity Checking Database [E2K2:First Storage Gro 



-inl x| 



In It ia I iE Ing ... -Done- 
Beginning Integrity Check for Database - blgDB ... -Done- 
Checking Integrity 

ESEUTIL Console Output: 

Initiating INTEGRITY node... 

Database: U: ^b IgDB. edb 
Streaming File: U: **-b IgDB. stn 
Temp. Database: TEMPIHTEG160B. EDB 

Checking database Integrity. 

Scanning Status ( V. complete) 

0 10 SO 30 40 50 60 70 30 90 



Integrity check successful. 

Operation completed successfully In 623.359 seconds. 
-Done- 

Integrity Check Completed Successfully —Done- 
Total elapsed time: 10 minutes 30.57739 seconds 



±1 



Database [E2K2:First Storage <9roup\(biaDB)] 



Processing Complete 



1^ 



Close 
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Automatic integrity check after split mirror backup 



If the Integrity Check box is checked in the GUI, the integrity check 
requires twice the disk space to preserve the previous known good copy of 
the recovery databases. Using this method maintains a safe copy of the 
database that can be recovered to the production server if needed, while the 
newest copy of the data is checked for integrity before becoming the 
recovery-ready copy 

As mentioned, if you are using this method, you must designate additional 
disk space on the recovery server. For each production LUN that will be 
managed by FRS in this way, two identically sized LUNs must be assigned 
to the recovery side. The second recovery LUN is configured exactly like 
the first. 

EVA and XP disk arrays 

For EVA and XP disk arrays, the LUN requires an hpfrs label. 
VA disk arrays 

For VA disk arrays, CommandView SDM must be used to create additional 
business copies. 

Manual integrity check independent of split-mirror backup 

If the integrity check box is not checked, copies of the database are 
automatically promoted to recovery-ready status. If you click Integrity 
Check, FRS checks the recovery-ready copy. This method uses only one 
recovery LUN for each production LUN and does not maintain a known 
good, recovery-ready copy (the "safe" copy mentioned above) of the 
database at all times. 
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Executing a recovery 



Regardless of the array type or backup method, the starting point for a 
database recovery requires that there are backup copies of the databases 
residing on the recovery server (an initial pair has already been created by 
using FRS). 

Recovery operations can be executed as often as needed, provided there is 
sufficient time between actions for the database to return to a "not locked" 
status. 

For Exchange 2000 you can choose to execute a recovery with or without 
log replay. 

Exchange 2000 Recovery without log replay 

From the FRS main window, select the database to be recovered from the 
left pane. The Database Configuration section then displays all information 
about the LUNs for that database. When you click Recover, a popup 
message asks whether log replay is required. Click No to decline log replay. 

Log replay will be disabled until the next split mirror backup has been 
completed for that database. Click OK to begin recovery without log 
replay, or click Cancel to return to the GUI. 



Caution If multiple databases within a storage group reside on one LUN, then all 
the databases in that storage group will be replaced with the recovery 
databases. If no log replay is chosen, the entire storage group is brought 
back to the point of the last backup. If each database resides on its own 
LUN, then only the database chosen for recovery will be rolled back to the 
point of last backup. 
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In the following example, if a recovery were to be executed for the database 
bigDB, recovery LUN 1 3 would be recovered back to the production LUN 
59. 



hp StorageWorks - Fast Recovery Solution 2000 



File Edit View Help 



□lx| 



21 



' |\R E COVE R Y\E 2K2\E wchange\Fir st Storage Group\bigDB 



^ Universal 
B RECOVERY 
B-Sj E2K2 

B-CD Exchange 

B -Q] First Storage Group 
~ ~ PUB 
i DB1 
[ DB2 
' DB3 



Fast Recovery Solution 



- 



S_QL 

Q-CD SQL Databases 
fi--^ big one 

□ ■■Q PRIMARY 

S big one_Data 
Mr big one_1_Data 
^ big one_2_Data 

■■Q DB1 
B-Q PRIMARY 

i 9 DB1_Data 

■■■U DB2 
■ T~l master 

] model 

■CD msdb 
■CH Northwind 
■CD pubs 
■C3 tempdb 



Database Configuration — 

■Database Status 

hp StorageWorks XP - Model: HP 0PEN-9 K 6 SCSI Disk Device 
Production Lun: 59 - Ldev: 43 - Disk (S:) 
Recovery Lun: 13 - Ldev: 37 - Disk [U:] 
Timestamp of this Backup: 5/20/2003 12:49:05 PM 
Integrity Checked:5/20/2003 1:29:43 PM 
Accepted as 3afe Copy:5/20/2003 1:39:31 PM 

Restored on: 5/20/2003 1 2:49:56 PM 



-Integrity Check — 

^ Run Integrity Check After 9plit Mirror 



Split Mirror Backup 



Integrity Check 



Recover 



Help 



"|5/20/2003 1 1:40 PM 



Status 
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In this example, the progress window is shown for the recovery of the 
database PUB of server E2K2 



^Recovering Database [E2K2:First Storage Group (PUB 



^jnjxj 



-D 



Initializing ... -Done- 
Dismounting Recovery Lun (I:) ... -Done- 
Dismounting Database(s) ==> PUB ... -Done- 
Setting the Restorable Flag for Database(s) ==> PUB ... 
Dismounting Production LUN (L:) ... -Done- 
Resyncron Iz ing the Pair ( PUB\\\. \PHYSICfiLDRIUE9) -Done- 
Waiting for Pair Resync to Complete .... -Done— 
Suspending Pair ... -Done- 
Waiting for Pair Suspend to Complete ... -Done- 
Mounting Production LUN (L:) ... -Done- 
Mounting Production Database(s) — > PUB ... -Done- 
Total Database Offline tine: 0 Minutes 6.13975 seconds 
Mounting Recovery LUN CI:) ... -Done- 
Recovery Completed Successfully -Done- 
Total elapsed tine: 0 minutes 10.578 seconds 



Database [E2K2:Fi rst Storage Group\(PUB)] 



Recovery Complete 



:Show .Detailsi 



When the recovery is complete, you must close the recovery window. 
When you close the window, the database is available for further 
backup/recovery/integrity check actions. 

Upon completion of the recovery, the Database Configuration section of the 
GUI changes to reflect the new "restored on:" date. As with backups, 
recoveries can be performed as often as necessary and can be executed in 
parallel, if needed. 
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Exchange 2000 Recovery with log replay 



From the FRS main window, select the database to be recovered from the 
left pane. The Database Configuration section then displays information 
about the production and recovery LUNs for that database. 

1 . Select the database to be recovered. 

2. Click Recover. 

The Recover button is enabled only if a split mirror backup has 
previously been completed by FRS and if no other actions are in 
progress for that database. 

A popup window asks for confirmation. 




3. Click Yes to confirm that you want to replay the transaction logs. 

The recovery process causes all databases in the storage group to be 
dismounted. 

A popup window asks for confirmation. 



HP FRS Recovery 



9 \ You have chosen to Re-Play all transaction logs following the Restore, This will cause ALL the Databases in this 
\f Storage Group to be taken offline during this process , Are you sure you want to continue with a recovery? 



i Yes 


No 







4. Click Yes to confirm that you want to dismount all databases and begin 
the recovery process. 
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In the following example, the progress of a recovery is shown for database 
VADB1. 



fi>; Recovering w/Log Re-Play Database [E2K2:SG3-VA\(VADB1)] 



In it La I is Lng . . . 

— >Unnount Lng Copy Dr-Lue: E: ... 

— >DeletLng Copy Lun: 13 ... -Done- 
DismountLng Recovery Lun (T:) ... -Done- 

DisnountLng Database(s) ==> UflDBl ==> UP.DB2 ==> URDB3 ... -Done- 
Sett Lng the RestorabLe FLag for Database* s> ==> UflDBl ... -Done- 
DisnountLng Product L on LUN CS:] ... -Done- 
Restoring the Database 11<==14]... -Done- 
Mounting Production LUH (S:) ... -Done- 

SauLng Log CheckpoLnt [C:\Progran F L les\EHehsrvr\MDBDflTfl\UflLQGS\E*. chk ) .. 
Mount mg Production Databasets) ==> URDB2 ==> UADB3 ==> UflDBl ... -Done- 
TotaL Database Qf f L Lne t Lne: 0 Minutes 37.51434 seconds 
Mounting Recouery LUN CT:) ... -Done- 

— >Re-fldding Copy Lun: 13 ... 

— >Mount Lng Copy Driue: E: ... 

Recovery Completed Successfully -Done- 

TotaL elapsed t Lne: 0 riLnutes 45.6745 seconds 



LlJ 



Database [E2K2:SS3-VA\(VADB1)] 



Recovery Complete 



W Show Detail^ Close 



The amount of time required for restoring the database depends on the 
number of logs to be replayed. 

On completion of the recovery, all databases are remounted and access is 
restored. 
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SQL 2000 Recovery 



From the FRS main window, select the database to be recovered from the 
left tree. The Database Configuration section then displays all information 
about the LUNs for that database. Click Recover and a progress window 
appears to show the progress of the recovery. 

In this example a SQL 2000 database (DB1), which resides on two LUNs, 
is recovered. Therefore two progress windows appear. When the recovery 
is complete, the FRS GUI will contain updated information about the 
recovery in the Database Configuration section. 



Recovering Database [SQL:(DB1)] 




□| x| 










1 In It La I iz Lng ... Database FLLe(s) - DBl_Data -Done- 
ID Lsnount ing Recouery Lun i!T:) ... -Done— 

ISyncron iz Lng with other- tasks Dismounting Database(s] == 

DLsnount ing Production LUN (E:) ... -Done- 
Resyncron is ing the Pair (DB1\\\.\PHVSICP,LDRIUE2) -Done- 
Waiting for Pair Resync to Complete -Done- 
Suspending Pair ... -Done- 
Waiting for Pair Suspend to Complete ... -Done- 
Mounting Production LUN i!E:) ... -Done- 
Total Database Offline tiroe: 9 Minutes 7.1S7375 seconds 
Mounting Recovery LUN (Ts) ... -Done- 

Recovery Completed Successfully -Done- 
Total elapsed time: S ninutes 13.34237 seconds 


r 1 


Initialising ... LogfLLeiis) - DBl_Log -Done- 
Dismounting Recouery Lun i!E:) ... -Done- 
Waiting for SQL Database Snapshot Restore to begin.... -Done- 
Dismounting Production LUM (F:) ... -Done- 
Resyncron is Lng the Pair C log-l\\N.sPHVSICALDRIUE3) -Done- 
Waiting for Pair Resync to Complete .... -Done- 
Suspending Pair ... -Done- 
Waiting for Pair Suspend to Complete ... -Done- 
Mounting Production LUN i!F:) ... -Done- 
Waiting for SQL Database Snapshot Restore to complete .... -C 
Mounting Recouery LUN (E:) ... -Done- 
— Recouery Completed Successfully Done- 
Total elapsed tine: 6 Minutes 15.56133 seconds 


±1 




<l 1 




<l 1 H 








Database [SQL:(DB1)] 
Recovery Complete 






R iShow Details 


Close | 
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Recovery from the 



local recovery LUN while a remote copy is taking place 



If necessary, a recovery can be executed while a remote copy is in progress. 
Executing a recovery from the local recovery LUN immediately cancels the 
remote copy in progress, regardless of its current state. 

This action leaves the remote copy in an unstable state and so it must be 
re-created from the original production LUN to make it stable and usable. 

Recovery from the remote recovery LUN 

If there is a remote LUN, and FRS has created at least one split mirror 
backup to it, there will be a Recovery From Remote LUN button on the 
right side of the FRS window. 

In the event the local recovery LUN corrupt and a remote recovery is 
needed, highlight the database that needs recovery and click Recovery 
From Remote LUN. 

This method of recovery invalidates the local recovery LUN. You will need 
to do a split mirror backup to the local recovery LUN to make it valid and 
usable. 
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Options 



From the View menu, select Options to change the following preferences 
for Maintenance and Recovery operations: 

• whether the Start button must be clicked before a backup or recovery 
will start 

• whether the backup and recovery actions are followed step by step in 
the backup/recovery window 

• whether the database is automatically remounted in Exchange 

• whether the backup/recovery window must be manually closed after 
an action is complete 

• whether to wait for the remote copy to be completed, which displays a 
progress window if the box is checked 
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Command Line Interface 



FRS provides command line control of split mirror backups, integrity 
checks, and remote copies. 

At the command prompt, change (using cd) to the directory where FRS is 
located. The default location is C:\program files\Hewlett-packard\frs. 

hpfrscmd -h displays a help window with all FRS commands. 



Parameters Entered: -? 
Command Format: 

hpfrscmd -h -t <msx I sql> [-v [log filename]] <-sm [-hot] I -ic I -rm I -acc I -rev> 
-db ProdS erver: [Exchange StorG roup: DBase I SQL DBase] 




Where: 



-h 



: Displays command line help. 



: FRS database type, 
msx - Exchange 2000 
sql - SQL 2000 



-v 



: Indicates logging is to be done, 
log filename - Name and location for FRS log file. 
Defaults to hpfrslog.txt 



-rev 



-sm 



-ic 



-rm 



-acc 



: Split Mirror to be done on this database. 

-hot - Database snapshot taken HOT. Database will NOT be shutdown! 

: Integrity Check to be run on this databases recovery copy. 

: Remote Mirror to be started on this databases recovery copy. 

: Integrity Check Accept to be run on this databases pending recovery copy. 

: Integrity Check Results Review to be run on this databases pending recovery copy. 



-db 



: Name and location of database to be operated on. 
ProdS erver - Production server name. 

StorG roup - Storage Group name. Exchange Only. 

Dbase - Database name. 



OK 
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Use the -acc switch to accept an integrity check that you ran previously 
After you accept the integrity check, FRS promotes the pending FRS copy 
to the recovery-ready FRS copy 

Important Always view the results of the integrity check before accepting them. There 
is no way to roll back a corrupt database that has been promoted to 
recovery-ready status. 

The following example shows the verbose output of a command line issued 
split mirror backup on the database VADB. This database resides on the 
server E2K2 in the storage group SG2. 



J C:\ WINNT\System32\cmd.ene 



C:\Program Files\Heulett-Packard\Fast Recovery Solutions>hpf rscmd -li 
6/12/2003 7:54:27 AM: Command buffer = -h 



C:\Program Files\Hewlett-Packard\Fast Recovery So lut ions >lipf rscmd -t msx -u mq.t 
pet -sin -db e2k2 :sg2 :vadb 

6/12/2003 7:56:31 AM: Command buffer = -t msx -v mq.txt -sm -db e2k2 :sg2 : vadb 
0> 6/12/2003 7:56:31 AM:6/12/2003 7:56:31 AM: Command line parameter found. Cont 
inuing 

\L> 6/12/2003 7:57:15 AM:Creating Split Mirror of Database [E2K2 :SG2\<UADB> ] 
i> 6/12/2003 7:57:15 AM: Initializing ... -Done- 

1> 6/12/2003 7:57:15 AM:Dismounting Recovery Lun (No Mount Point Defined) . . . -S 
Bfipped- 

1> 6/12/2003 7:57:24 AM : Dismount iny DatabaseCs> ==> UADB ... -Done- 

1> 6/12/2003 7:57:26 AM:Dismounting Production LUN <E:> ... -Done- 

i> 6/12/2003 7:57:27 AM:Snapping Copy of Database 16==>22>... -Done- 

1> 6/12/2003 7:57:27 AM:Mounting Production LUN <E:> ... -Done- 

i> 6/12/2003 7:57:28 AM: Mounting Production Database<s> UADB ... -Done- 

i> 6/12/2003 7:57:28 AM:Total Database Offline time: 0 minutes 11.87488 seconds 

1> 6/12/2003 7:57:28 AM: Split Mirror Backup Completed Successfully Done 

1> 6/12/2003 7:57:28 AM:Total elapsed time: 0 minutes 13.15613 seconds 



6/12/2003 7:57:29 AM: Exiting Hpfrs, Return Code = 0 
C:\Program Files\Heulett— PackardSFast Recovery Solutions>_ 



id 
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If you specify an FRS log text file with the -v option, it will be saved in the 
HP Fast Recovery Solutions directory. 

You cannot run FRS command line entry and the FRS GUI at the same 
time. After you have started an action by command line entry, you cannot 
open the GUI until the action is complete. 
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5 

Using HotSplit backup 



This chapter explains how to use the HotSplit backup feature of FRS for 
Exchange 2000. The following topics are covered: 

• Enabling the HotSplit feature 

• Creating a HotSplit backup 

• Recovering a HotSplit database 
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Enabling the HotSplit feature 



FRS version 2.03 lets you "hot split" Exchange 2000 databases as an option 
to the split mirror backup feature. The HotSplit option creates copies of the 
production Exchange database while the database continues to run. This 
provides a no-downtime solution for split mirror backups. 

To enable the HotSplit function from the FRS main window: 
1. Click File, click Overrides, and click Enable HotSplits. 

The following User agreement and Warning information displays, 
explaining the potentially unstable nature of HotSplits: 

Hot Split Use Agreement 

WARNING: Activation may result in Database 
Corruption ! 

Please read the following carefully. To activate the 
"HotSplit" capability you must read and accept this 
agreement . 

WARNING! Activating the "HotSplit" option is NOT 
recommended or encouraged by either HP or Microsoft . 
Additionally, this option will force the automatic 
Integrity Check option to be enabled for all 
Exchange databases which will require double the 
disk storage to be available before it can be used. 

IMPORTANT: READ CAREFULLY - Using the "HotSplit" 
feature in FRS may cause database corruption when 
restored by FRS. Log files must be protected 
outside of FRS and each time they are truncated a 
new "HotSplit" copy MUST be taken to continue FRS 
protection. It is also highly recommended that a 
recent tape backup has been taken prior to using the 
"HotSplit" feature and that this tape backup has 
been verified to be consistent and recoverable. 
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By agreeing to this, the user of the "HotSplit" 
feature accepts responsibility for its use and 
understands the risks involved with using this 
feature . 

Additionally user understands and agrees that 



EXCEPT TO THE EXTENT PROHIBITED BY LOCAL LAW, IN NO 
EVENT WILL HP OR ITS SUBSIDIARIES, AFFLIATES, 
DIRECTORS, OFFICERS, AGENTS OR SUPPLIERS BE LIABLE 
FOR DIRECT, INDIRECT, SPECIAL, INCIDENTAL, 
CONSEQUENTIAL, PUNITIVE, OR OTHER DAMAGES (INCLUDING 
LOST PROFIT, LOST DATA, OR DOWNTIME COSTS) , ARISING 
OUT OF THE USE, INABILITY TO USE, OR THE RESULTS OF 
USE OF THE SOFTWARE, WHETHER BASED IN WARRANTY, 
CONTRACT, TORT, OR OTHER LEGAL THEORY, AND WHETHER 
OR NOT HP WAS ADVISED OF THE POSSIBILITY OF SUCH 
DAMAGES . 

Click the I Accept button to turn on HotSplit capabilities if you 
understand and accept the use agreement. 

The following message confirms that HotSplit is enabled: 



HP FRS 2000 



The HotSplit feature has been enabled and is available for use, 
Please use it with Caution, 



OK 



Once this feature has been enabled, there will be a new button on the 
FRS main window for the execution of HotSplits for Exchange 
databases. 



Creating a HotSplit backup 



The HotSplit backup feature requires two recovery LUNs for each 
production LUN managed by the HotSplit feature. One recovery LUN is 
the recovery-ready LUN, while the other is the pending copy The pending 
copy becomes recovery-ready only after you run an integrity check against 
the database and then view and accept the integrity check. 

To execute a HotSplit on an Exchange database: 

1 . Select the database you want to HotSplit. 



+ hp StorageWorks - Fast Recovery Solutions 2000 



File Edit View Help 



mm 



Q|y| 



" |\D 0 R 0 T H Y\G I LE S VE xchange\S G 1 \PU B 



Fast Recovery Solutions 2000 



S FRS 2000 
i--^ DOROTHY 

! % NEELIX 

$ 8 °z 

□ *P Microsoft SQL Servers 

EE @ new group 

Etl @ SQL Server Group 

i g GILES 

□ f^ 3 Exchange 
H j(S SG1 

-'WB 

0 DB1 
0 DB2 

- , i SG2 
• 0 DB4 

S ijJJ VASG 

0 DBE 
0 DBS 
0 DB7 

- . 1 SG4 

i 0 DB10 

! 0 DBS 

i 0 DBS 



Database Configuration 
Database Status 



hp StorageWorksXP- Model: HP OPEN-9 SCSI Disk Device 
Production (Disk 10) Lun: 25 - Ldev: 123 - Path ( 0: ] 
Recovery (Disk 7) Lun: 28 - Ldev: 1 28 - Path ( F: ) 
Tirnestamp of this Backup:2/27/2004 1 1:27:52 AM 
Integrity Checked:2/27/2004 1 1:28:13 AM - Successful 
Accepted as Safe Copy:2/27/2004 1 1 :29:46 AM 

Restored on: 2/27/2004 4:09:39 PM 




- Pending Status 

Pending (Disk 1G) Lun: 37 ■ Ldev: 133 - Path ( T: ) 
Tirnestamp of this Backup:2/27/2004 11:23:50 AM 

!✓ Run Integrity Check After Split Mirror 

Integrity Checked: 2/27/2004 11:24:08 AM - Successful 



Split Mirror with 
Integrity Check 



Integrity Check. 



HotSplit with 
Integrity Check 



Recover 



Help 



"|3/12/2004 1 8:10 AM 



2. Click the Hot Split with Integrity Check button. 
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The following message warns you of the risks in using HotSplit. 



HP FRS 2000 



Warning, You have requested a Hot Split backup, which may leave the backed up databases in an inconsistent state! 
Are you sure you want to continue with a Hot Split backup? 



Yes 



No 



3. Click Yes to start the HotSplit. 

A progress window shows the HotSplit processing as it occurs. An 
integrity check automatically runs following the HotSplit. The 
integrity check may return as "failed." This is not unusual and occurs 
because an open Exchange database is inconsistent by definition. 



^ Integrity Checking Database [GILE5:5G1\(PUB)] 



MB 



Initiating INTEGRITY node... 

0 bf bt> =■ = •= : T : C'N b 1 . ^ db 
Streanlng File: T:"^-publ.stn 
Tenp. Database: TEMPI NTEG2U84. EDB 

Check Lng database Integrity. 

The database Ls not up-to-date. Th Ls operat ion nay f Lnd that 
th is database is corrupt because data fron the Log -f L Les has 
yet to be p Laced In the database. 

To ensure the database is up-to-date p Lease use the 'Recover 

Scann Lng Status C '/. comp lete) 
0 10 20 30 40 50 60 70 80 90 1 



Integr Lty check successf u L . 

Operat Lon corip Leted successf u L Ly in 19. 94 secon 
—Don e— 

Integr Lty Check Conp leted -Done- 
Tot a I elapsed tine: y ninutes 27.32738 seconds 




D-atobose [(9ILE5:5<91\(PUB)] 



Processing Complete 



Show Details 



Close 
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4. Click Close when the progress indicator shows that processing is 
complete. 

5. View the results of the integrity check before you accept them. 

6. Accept the integrity check. 

When you accept the integrity check, the new data copy becomes the 
recovery-ready copy. This is the copy that will be used for recovery in 
the event of corruption of the production database. 
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Recovering a HotSplit database 



To recover a database that has been previously HotSplit: 

1 . Select the database to be recovered. 



if, bp StorageWorks - Fast Recovery Solutions 2000 



File Edit View Help 



ME1 



Fast Recovery Solutions 2000 



3 FRS 2000 

DOROTHY 
9] NEELIX 



F 



oz 

Microsoft SQL Servers 

B @ new group 

El @ SQL Server Group 

GILES 

■fc^ 3 Exchange 

B |jJJ SG1 

: i ' jR 

| £J DB1 

• 0 DB2 

- , i SG2 

• 0 DB4 

- VASG 

; 0 DB5 

! 0 DBG 

> ^ DB7 

B |jJJ SG4 

0 DB10 

0 DB9 



' ]\.D 0 R 0 T H YVG I LE S \E nchange\.S G 1 \PU B 



Database Configuration 

-Database Status 

hpStorageWorksXP - Model: HPOPEN-9 SCSI Disk Device 
Production (Disk 1 0) Lun: 25 - Ldev: 1 23 - Path [ 0: ) 
Recovery (Disk 7) Lun: 28 - Ldev: 129 - Path ( F: ) 
Timestarnp of this Backup: 2/27/2004 11 :27: 52 AM 
Integrity Checked:2/27/2004 1 1 :28:1 3 AM - Successful 
Accepted as Safe Copy: 2/27/2004 1 1 :29:46 AM 

Restored on: 2/27/2004 4:09:39 PM 



■Pending Status 

Pending (Disk 1 6) Lun: 37 ■ Ldev: 1 38 ■ Path ( T: ) 
Timestarnp of this Backup: 2/27/2004 11 :23: 50 AM 

17 Run Integrity Check After Split Mirror 

Integrity Checked:2/27/2004 1 1 :24:08 AM - Successful 



Split Mirror with 
Integrity Check 



Integrity Check 



Hot Split with 
Integrity Check 



Help 



Status 



"13/12/2004 



5:10AM 



2. Click the Recover button. 
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The following message displays, asking if you want to replay the log: 



HP FRS Hot Split Log Re-Play Default 



■\ For 'Hot Split" recovery, all current Transaction Logs are Re-Played by default. 
* v Will this be O.K.? 



Yes 



No 



Cancel 



3. Click Yes. This step is not required but is strongly recommended when 
you recover a HotSplit database. 

A warning displays to indicate that all databases within the target 
storage group will be taken offline during the recovery in order to do 
soft recovery and log replay. 

A progress window shows the recovery as it occurs: 



^ Recovering w/Log Re-Play Database [GILES:SG1 \(PUB)] 



Logflle base name: 
Log f i Les: 
System f i Les: 



E00 

< current dLrectory> 
< current dLrectory> 



Performing soft recovery... 

Operation completed successfully In £3.609 seconds. 

-Done- 
Mount Ing Production Database(s) ==> OBI ==> DB2 ==> PUB ... 
Total Database Offline time: 0 minutes 42.09312 seconds 
Mounting Recovery LUM - Logical Disk - T: Uolume Mount Pol 
Recovery Completed Successfully -Done- 
Total elapsed time: 1 minutes 22.37488 seconds 



Database [61 L ES: 5G l\ (PUB)] 



Recovery Complete 



1^ 'Ihy-: Detail:. 



Close 



The progress window indicates a soft recovery is being performed. 
After recovery of a HotSplit database, a soft recovery is required to 
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bring the data back to a consistent state before mounting it in 
Exchange. This process dismounts all databases in the storage group. 

4. Click Close to close the recovery window when the recovery process is 
complete. 

All production databases are now back online. 
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6 

Troubleshooting 



This chapter includes the following topics: 

• FRS error messages 

• Product support information 
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FRS error messages 



This section describes recommended actions for messages, errors, and 
warnings displayed by FRS during the following operations: 

• maintenance 

• recovery 

• terminating processes 

• integrity checks 



Maintenance 

Error Dismounting the local/remote drive failed. Please close 
any open files on that drive and select retry to try 
again, select ignore to ignore the error and continue, 
or select abort to cancel the operation. 

FRS cannot dismount a file system drive if it detects any activity on it. This 
could cause data inconsistency, so FRS waits until all files on that drive are 
closed before dismounting the drive. Confirm that all files are closed, and 
select retry. 

If the problem is with the remote drive, confirm that connectivity to the 
remote machine is intact and that there are no network issues preventing 
FRS from communicating with the remote server. 

Error Mounting the remote drive failed. Please select retry to 
try again, select ignore to ignore and continue, or 
select abort to cancel the operation. 

FRS cannot remount the drive if the connection to the production server has 
been lost. Confirm that connections are intact and that the recovery server 
can ping the production server. Then retry. 

Warning Are you sure you want to continue with a split mirror 
backup? 
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After the split mirror backup is started, it cannot be stopped without 
jeopardizing the integrity of the database. Both the recovery and production 
database being backed up are inaccessible for a short time during this 
period. If a split mirror backup is initiated when the production database is 
corrupt, known good recovery databases are overwritten with the corrupt 
one. (Using the integrity check/safe copy feature of FRS can eliminate this 
potential issue.) 

Warning No LUN's of appropriate size found. Cannot continue. 

LUNs must be configured on the recovery server for use by FRS and 
conform to these criteria: 

• the HPFRS label 

• same size as the production LUNs 

If LUNs are available, but they are not the same size as the production 
LUNs, FRS cannot pair them. Assign more LUNs of the same size as the 
production LUNs. 

Recovery 

Error Failure setting the database restore flag. Please 
select retry to try again. 

Failure resetting the database restore flag. Please 
select retry to try again. 

Failure querying the database restore flag. Please 
select retry to try again. 

If FRS cannot communicate with the Exchange server, it cannot manipulate 
the restore flag. Check connectivity to the production server. Confirm that 
all Microsoft services are online. 

Error This operation cannot be completed. Pair needs to be in 
suspended state to run recovery. 
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The Recovery button is enabled only if a split mirror backup has been done 
in the past and the pair has been created using FRS. This error occurs if the 
pair has been manually split at the disk array 

Error This operation cannot be completed, no recovery LUN 
available 

The Recovery button is enabled only if a split mirror backup has been done 
in the past and the pair has been created using FRS. This error occurs if a 
pair has been manually deleted at the disk array and then a recovery is 
attempted. 

Message Are you sure you want to continue with a recovery? 

After a recovery is started, it cannot be cancelled until the recovery is 
completed. The production database will be replaced by the recovery-ready 
database. 



Terminating processes 

Message Operation cannot be cancelled. . . 

Closing either the GUI or the progress window for a split mirror backup or 
a recovery would cause FRS to leave the database in an unknown state. For 
this reason, FRS does not allow windows to be closed while these actions 
are in progress. If you forcibly cancel the process through the operating 
system (for example, Task Manager), the integrity of the database cannot be 
guaranteed and FRS and the disk array may have conflicting information 
about the databases. 



Integrity checks 

Warning By accepting this integrity check the recovery volume 
will be replaced by the safe copy volume. 

Before accepting the copy, examine the output of the integrity check. Do 
not accept the integrity check unless you have confirmed that it is a good 
copy of the database. After the integrity check is accepted, the former 
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recovery-ready volume becomes the pending copy that is used for the next 
backup/integrity check. 

Warning Activating Automatic integrity checks following a split 
mirror backup consumes double the disk storage. 

Automatic integrity checks require two secondary (copy) volumes for each 
primary (source) volume. One is the pending copy that is integrity checked. 
Then after it is accepted as good, it becomes the known good 
recovery-ready copy. There will now be a second LUN required for the 
next backup. The recovery-ready copy of the database is never overwritten 
by the new copy until the new copy has been integrity checked and 
accepted. In this way, there is always at least one known good 
recovery-ready copy of the data. 
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Product support information 

For additional information about installing, implementing, or maintaining 
FRS, contact your HP representative. 
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Glossary 



BC 



CA 



cluster 



HP Storage Works Business Copy XP. Software that creates and maintains 
local copies of data stored on the disk array. The copies can be used for data 
duplication, backup, and local disaster recovery. 

HP Storage Works Continuous Access XP. Software that creates and 
maintains copies of data stored on a remote disk array. The copies can be 
used for data duplication, backup, and disaster recovery. 

The concept of linking individual servers physically and programmatically 
and coordinating communication between them so they can perform 
common tasks. 



DCOM 

EVA 

failover 



Windows distributed component object model. 
HP Storage Works Enterprise Virtual Array. 

Process that automatically shifts the workload from one server in a cluster 
to another server in the event of a failure. 



FRS 

FRS server 
HotSplit 



HP Storage Works Fast Recovery Solutions. 

The server where copies of the production database are staged and 
managed. The FRS server runs the FRS GUI. 

A feature that creates copies of a production Exchange database while the 
database continues to run. 



LDEV 



Logical device. An LDEV is created when a RAID group is divided into 
pieces according to a selected host emulation mode (that is, OPEN-3, 
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OPEN-8, OPEN-9, etc.)- The number of resulting LDEVs depends on the 
selected emulation mode. The term LDEV is often used synonymously 
with the term volume. 



LUN Logical unit number. A LUN results from mapping a SCSI logical unit 

number, port ID, and LDEV ID to a RAID group. The size of the LUN is 
determined by the emulation mode of the LDEV, and the number of LDEVs 
associated with the LUN. For example, a LUN associated with two OPEN- 
3 LDEVs will have a size of 4,693 MB. 

online backup Backup while Exchange services are still running. There is no interruption 

in services for backup. 

P-VOL The primary or main volume that contains the data to be copied, 

production server Exchange 2000 or SQL 2000 server. 

RAID Redundant array of independent disks. 

recovery server FRS server. The server where copies of the production database are 

managed. 

S-VOL Secondary or remote volume. The copy volume that receives data from the 

primary volume. 

Snapclone Secondary copies of the databases that are created using the EVA storage 

appliance. 

split mirror backup Also called off-line backup, because it is performed after a normal database 

shutdown. All data files and control files are consistent to the same point in 
time. Used in environments where it is possible to take services off-line for 
short periods every day to do backup. 

VA HP Storage Works Virtual Array. 

XP HP Storage Works Extended Performance Array. 
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